Security Engineer

PassFort; Greater London; On-site; GBP 70,000 - 85,000; Full time

Benefits offered by this job

Share options up to £15,000

Office in Shoreditch (dog-friendly)

Free breakfasts, snacks and lunches

Flexible, office-first culture

28 days holiday + bank holidays

Parental leave and fertility support

Job summary

Accurx is solving healthcare productivity for the NHS. We protect patient data while building a unified platform that serves clinicians and staff across multiple care settings.

Join the Security Engineering & Operations team on the front lines of safeguarding NHS data, incident response, risk assessment, and safe adoption of AI tooling within a fast-growing, AI-native company.

Qualifications

• Experience in vulnerability management and incident response.
• Strong understanding of cloud security baselines and risk controls.
• Familiarity with AI risk frameworks and data protection requirements.

Responsibilities

• Run and review vulnerability scans, track findings to remediation and SLAs.
• Harden cloud services against baselines, turning best practices into actionable steps.
• Assist during security incidents: detect, respond, and document the events and playbooks.

Skills

Vulnerability management

Cloud security

Security incident response

AI risk frameworks

Security audits

Communication

Tools

SSO platforms

Threat modelling

Job description

Accurx is solving healthcare productivity for the NHS.

For decades, the NHS has struggled with fragmented systems that make simple tasks feel impossible. At Accurx, we're changing that by building a single, system-wide platform that helps every patient get gold-standard, efficient, and joined-up care.

What started as a way for GPs to text a patient has now evolved into an all-in-one digital toolkit used by 98% of GP practices.

Our platform now powers Total Triage to manage patient demand, and Self-Book, which lets patients schedule their own appointments in seconds. We've automated routine care with Patient Questionnaires for long-term conditions, while Accumail finally allows staff-to-staff communication to happen instantly across different care settings. We're now pushing the boundaries of the consultation itself with Accurx Scribe, our AI-powered note-taker that drafts medical notes in real-time.

We're not just shipping features. We're giving clinicians their time back and ensuring every patient journey is as smooth as it should be.

The team

You'll join Accurx's Security Engineering & Operations team, on the front line of protecting patient and NHS data across our products, cloud platform, and corporate systems. Millions of patients and clinicians rely on Accurx every day, and the NHS trusts us as a supplier handling some of the most sensitive data there is. Every vulnerability you triage, account you audit, or system you help harden directly reduces real-world risk for real people. As we push to become an AI-native company, this team also makes sure new AI tooling - LLM features, agents and MCP integrations get adopted safely, so we never trade patient data security for speed.

Challenges you'll solve...

• Run and review vulnerability scans across our estate, tracking findings through to remediation and keeping teams accountable to SLAs
• Help harden our cloud services and systems against CIS/NIST baselines, turning good practice into concrete, actioned recommendations
• Get hands-on during security incidents, helping detect, respond to, and write up incidents, and keeping our playbooks sharp and current
• Audit user accounts and access across our systems, catching stale accounts, weak passwords, and anomalies before they become problems
• Review new AI tools and MCP server requests referred by our Privacy team, assessing what data they'd touch and what model sits behind them, and help maintain our inventory of approved AI tooling
• Apply our AI Development Risk Framework to new AI experiments, checking the right controls (data classification, environment isolation, encryption, credential handling) are in place before anything goes live
• Contribute to threat modelling and design reviews, helping teams build securely from the start rather than bolting it on later
• Help educate technical teams across the business on security fundamentals, in a way that's approachable, blame-free, and genuinely useful

You should apply if...

• You want to build foundational depth in one or two security domains; this role is about reliably executing strong processes, not setting strategy from day one
• You get satisfaction from the unglamorous-but-critical work: patching, auditing, reviewing, knowing it protects real patients
• You're curious about how AI tooling can be adopted safely, and want hands-on exposure to reviewing LLM features, agents, and AI risk frameworks
• You communicate clearly and transparently, and you'd rather support a colleague than point fingers when something goes wrong
• You're comfortable picking up new tools and playbooks quickly, whether that's a scanning tool, an SSO platform, or an incident response process
• You want your day-to-day work to have a direct, visible link to protecting the NHS and the patients it serves

What's in it for me?

You'll be joining an established but fast-growing Tech for Good movement, where we're led by our Principles and our mission to solve healthcare productivity.

• £70,000 - £85,000 salary + share options up to £15,000
• Benefits to suit you: adjust your healthcare cover, your pension or life insurance, whatever stage you're at in life
• Flexible working: We are an office first culture and ask that you're in our (dog-friendly) Shoreditch office 3 days a week, with core hours of 10am - 4pm
• Time off: You'll get 28 days of holiday (plus bank holidays) and up to 4 weeks to work from anywhere per year
• Family matters: We offer enhanced parental leave, fertility support and parental loss support
• We have our very own Chef! Free healthy breakfasts, snacks and lunches will be provided, with the occasional sweet treat!